301-frameworks-spring-boot-core
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions require the agent to execute shell commands, specifically
./mvnw compile,mvn compile, andmvn clean verify. Running build scripts or wrappers on untrusted repositories can lead to arbitrary code execution if the target project contains malicious build logic or plugins. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it reads and processes external, potentially untrusted, Java project code.
- Ingestion points: Reads Java source files, Maven build configurations (
pom.xml), and application property files. - Boundary markers: None provided to distinguish between the skill's instructions and the untrusted data being reviewed.
- Capability inventory: Ability to execute shell commands (
mvn) which can interact with the network and local file system during a build process. - Sanitization: The skill does not define sanitization or validation logic for the code it ingests before triggering the build commands.
Audit Metadata